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INTRODUCTION 


Due to the complexity of fault-tolerant computer systems, automated tools such 
as ARIES (Automated Reliability Interactive Estimation System), CARE III 
( Compute r-Aided Reliability Estimation), and HARP (Hybrid Automated Reliability 
Predictor), ect., are being used in the reliability analysis and development of 
fault- tolerant computer architectures (ref. 1 and 2). The Semi -Markov 
Unreliability Range Evaluator program, SURE, is one of the latest reliability 
analysis tools to be introduced (ref. 3). The SURE program provides an 
alternative approach to the difficult task of solving convolution integrals 
traditionally used to determine the reliability of a system modeled by a semi- 
Markov model. The SURE program implements mathematics developed by White (ref. 
4) and Lee (ref. 5) for analytically specifying lower and upper bounds on the 
death-state probabilities of a semi-Markov model. 

If tools such as SURE are to be used in the development of highly reliable 
computer systems, the tools themselves must produce reliable outputs. How does 
one know that the bounds given by SURE actually envelop the exact unreliability 
for any given model of a system? White (ref. 4) and Lee (ref. 5) both provide 
mathematical proofs for their lower and upper bounds on the death-state 
probabilities of a semi-Markov model. Given that these proofs are correct, the 
question then becomes, are these mathematical bounds correctly implemented in 
the SURE program? To answer this question, i.e. validate SURE, three major 
studies of SURE are being conducted: (1) comparison of SURE's bounds to exact 

analytic solutions for simple semi -Markov models, (2) comparison of SURE's 
bounds to estimates from other reliability analysis tools (ARIES, MARK, and 
CARE ill) for more complex models, and (3) analysis of the mathematical bounds 
themselves . 
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This paper describes the results of the first phase in the effort to validate 
SURE version 4.3. During this first phase, SURE's bounds (those developed by 
White) were compared to exact solutions analytically derived for simple semi- 
Markov models. To verify correct implementation of the bounds, fifteen simple 
semi-Markov models were constructed. Each model was solved directly for the 
individual death-state probabilities, and these exact death-state probabilities 
were compared to the bounds given by SURE. Due to the difficulty in solving 
even simple models by hand, the state size of the models was limited. 

COMPUTATION OF DEATH-STATE PROBABILITIES FOR SEMI-MARKOV MODELS 

In a Markov-type model of a fault-tolerant system, the unreliability of the 
system is equivalent to the sum of all of the death-state probabilities in the 
model. Each death-state probability can be determined analytically by summing 
the probabilities of traversing every path through the model that leads to that 
death state. The exact death-state probability is determined mathematically by 
solving a series of convolution integrals. As the model gets larger, more 
convolution integrals need to be solved. Due to the difficulty in solving even 
a small number of convolution integrals, the models in this study were limited 
to five states. 

To calculate each death-state probability, each path to that death state can be 
analyzed transition by transition. In a pure Markov model, the transitions 
between states are exponentially distributed. However, in a semi -Markov model, 
transitions between states can be described by distributions other than the 
exponential. For this work, transition rates were limited to distributions 
that are mathematically tractable, namely the exponential, uniform and impulse 
distributions. 
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In the SURE program, the transition rates are labeled either slow or fast. 

Slow transition rates correspond to fault arrivals in a computer system and are 
assumed to be exponentially distributed. Fast rates describe the system's 
response to faults and can be characterized by any distribution. The slow 
transitions are denoted in the models by a greek character representing the 
rate, and the general transitions are denoted by a capital letter that 
represents a particular distribution. The following three path classifications 
based on the state transitions rates are used in SURE: (1) slow on path, slow 
off path, (2) fast on path, arbitrary off path, and (3) slow on path, fast off 
path. (Note: the transition on the path being analyzed is called the on-path 
transition and the remaining transitions are referred to as off-path. ) Figures 
1, 2, and 3 are examples of these path steps as shown in The SURE Reliability 
Analysis Program. 




FIGURE 2 



each of the above path classifications, denoted (T) where i = 1, 2, or 3 for 
each classification, are defined as follows: 


/r /T — x l /T-xl-...-xn 

Pi ( T ) = ••• x i e -(X1 + Yl,xl \ 2 e " (X2 + Y2,x2 ••• 

'0 ' 0 ' 0 

^ e -(Xk + Y k)xk 

/T /T-xl /T-xl - . . .-xn 

P 2 (t) = J o J ••• j e - ® 1 x 1 [ 1-Fj 2 ( x, )]***[ 1-Fj^ B i ( x x ) ] ••• 

e-®™[l-F m , 2 (x m )3---[l-F ra(BB> (x ra )]dF m( i(x in )---dFi ( i(Xi 


/T /T-xl /T-xl - . . .-xn 

P 3 (T) = J o J J o ai e-(«l + pi)yl [1 _ Gi 2(yi)] ... ... 

“hS- ' —Pn , yn t X _ G (y n )]...[ !_ G (Yn ) ]d y n ... dyi 
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To compute the death-state probability from a path that contains a combination 
of classifications, the integrals are simply combined as in White's Synthetic 
Bounds (ref. 4) p. 7-8. Using these formulas, one can calculate the 
unreliability of a simple semi -Markov model. 

In order to use SURE to find the unreliability of a given model, the model must 
be described using a simple language that enumerates all of the transitions of 
the model. In SURE, the slow transitions are simply specified by giving the 
exponential rate, and the fast transitions are specified by giving the mean, // , 
and standard deviation, <r, of that transition's distribution and specifying the 
transition probability p. These statistics are defined independently of any 
competing exponential transitions. Given the general path step in Figure 4, 
the following formulas define the mean, variance, and transition probability 
for a general fast transition F x : 



/tf ( Fj ) = p-MFJ t[l - F 2 ( t) ] [ 1 - F 3 (t)] [1 - F n (t)]dF 1 (t) 

'o 

tf 2 ( F x ) = [p~ 1 ( F x ) jV[l - F 2 ( t ) ] [ 1 - F 3 (t)] •• [1 - F n (t)]dF 1 (t)] - fJ 2 { F x ) 

p(F 1 ) = f [1 - F 2 (t)[l - F 3 ( t) ] • ■ [1 - F n (t)]dF 1 (t) 
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The following is a collection of fifteen simple test cases that compare the 
exact solution for the death-state probabilities in each test model to the 
bounds given by SURE. For each test case, the model is given along with the 
equations for the exact death-state probabilities. Equations for u, a 2 , and p 
are given for models with non-exponential transitions. A table that compares 
the exact solutions to the SURE bounds for a range of parameter values follows 
each model. For all cases, the mission-time default of 10 hours was used. 

A relative error estimate is also given for the bounds. Here, 

relative error = |SURE bound furthest from exact solution - exact solution! 

exact solution 

This error estimate gives a measure of the tightness of the bounds. The 
unreliability estimate given by the SURE bounds is more precisely expressed 
when the bounds are tight. A small relative error is indicative of tight 
bounds. Correspondingly, a large relative error indicates a wide spread in the 
bounds. The acceptable degree of tightness in the bounds depends on the needs 
of the user and the intended application. 

A hand calculator was used to obtain numerical values from the analytic 
solutions for specific values of the model parameters. In cases where the 
calculator had insufficient precision to correctly compute the analytic 
solutions, a program called MARK (ref. 6) was used to determine the death-state 
probabilities. MARK uses a combination of Pade approximations, scaling, and 
squaring techniques to compute a matrix exponential needed to determine the 
death-state probabilities. The solutions obtained by MARK are indicated 


throughout the paper by an @. Since the SURE bounds are given in six 
significant digits, the exact solutions were also rounded off to six 
significant digits. All warning and error messages that were output by the 


SURE program when each case was run are noted at the bottem of the appropriate 
table and are explained in the discussion of the results. 



PROBLEM 1 



F(t) = t/a, t < a; 

If t > a; 


G( t ) = t/b, t < b 
1, t > b 


Assumption: a < b < T 


Transition Description 


p(F) - f [1 - G(T)]dF(T) = f (1 - t/b) (l/a)dt - 1 - a/(2b) 

' o ' o 

//(f) - p-MF)J"tCl - G(t)ldF(t) = (2b) (2b - a)- 1 f* t(l - t/b)(l/a)dt 

- (3ab - 2a 2 )(6b - 3a)" 1 

a 2 (F) = p" 1 (F) ft 2 [1 - G(t)]dF(t) - ju 2 ( F) 

'0 

= (2b) (2b - a)- 1 Pt 2 (l - t/b) (l/a)dt - // 2 (F) 

' o 

= (6a 2 b 2 - 6a 3 b + a 4 )(72b 2 - 72ab + 18a 2 )' 1 


P(G) 

= f[l - F(t)]dG(t) = f (1 - t/a)b~ 
'o ' 0 

1 dt = 

a/(2b) 

//(G) 

= p-MGjj’tll - F(t)]dG(t) = 2ba _ 1 J 

* tb -1 (1 
0 

- t/a)dt 

p 2 (G) 

= p-MGjf t 2 [l - F(t)]dG(t) - // 2 (G) 

'o 




- 2ba~ 1 f t 2 b~ x (1 - t/a)dt - jj 2 (G) = 

'o 

a 2 /1 8 



a/3 



Death-State Probabilities 



- G(t)]dP(t) 

- F(t)]dG(t) 



t/b ) a - 1 dt 
t/a)b -1 dt 


1 - a/(2b) 
a/(2b) 
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TABLE 1 


a: uniform parameter for the (0,1) transition 
b: uniform parameter for the (0,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

a= le-6 

D X (T) 

9.50000e-01 

b= le-5 

D 2 (T) 

5. 00000e-02 

a= le-6 

D X (T) 

9.99995e-01 

b= le-1 

D 2 (T) 

5.00000e-06 

a= 5e-8 

D 2 (T) 

1.00000e+00 

b= 4e-8 

d 2 (t) 

2.50000e-09 

a= le-3 

D x (T) 

9.50000e-01 

b= le-2 

D 2 (T) 

5.00000e-02 

a= 2e-2 

D 2 (T) 

9.00000e-01 

b= le-1 

D 2 (T) 

1.00000e-01 


SURE BOUNDS % 

ERROR 


(9.49999e-01, 9.50000e-01) 0.000 

( 5.00000e-02, 5.00000e-02) 0.000 

(9.99994e-01, 9.99995e-01) 0.000 

( 5.00000e-06, 5.00000e-06) 0.000 

(1.00000e+00, 1.00000e+00) 0.000 

(2.50000e-09, 2.50000e-09) 0.000 

(9.49372e-01, 9.50000e-01) 0.066 

(4.99750e-02, 5.00000e-02) 0.050 

(8.88231e-01, 9.00000e-01) 1.308 

(9.90000e-02, 1.00000e-01) 1.000 
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PROBLEM 2 



F(t) = 0, t < a; 

1, t > a; 

Assumption: a < b < T 


G(t) = 


t/b, t < b 
1, t > b 


p(F) 
//(F) 
a 2 (F) 

p(G) 
//(G) 
a 2 (G) 


Transition Description 
= f[l - G(t)]dF(t) = 1 - G(a) = 1 - a/b 

- p- 1 (F)ft[l - G(t)]dF(t) = b(b - a) -1 [a( 1 

'o 

= p _1 (F) C t 2 [l - G(t)]dF(t) - // 2 ( F ) 

'o 

= b(b - a)- x [a 2 (l - a/b)] - // 2 (F) = 0 

= f[l - F(t)]dG(t) = f b-Mt = a/b 
'o ' o 

= p- 1 (G) ft[l - F(t)]dG(t) = ba _1 (* tb -1 dt 

' 0 '0 

= p-MG)f t 2 [l - F(t)]dG(t) - fj 2 (G) 

'o 

= ba -1 T t 2 b _1 dt - // 2 (G) 

' n 


- a/b) ] = a 


= a/2 


a 2 /12 
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TABLE 2 


a: impulse parameter for the (0,1) transition 
b: uniform parameter for the (0,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

a= le-6 

Dj (T) 

9.00000e-01 

(8.99999e-01, 9.00000e-01) 

0.000 

b= le— 5 

D 2 (T) 

1.00000e-01 

(9.99999e-02, 1.00000e-01) 

0.001 

a= le— 6 

Dj (T) 

9.99990e-01 

(9.99989e-01, 9.99990e-01) 

0.000 

b= le-1 

d 2 (T) 

1.00000e-05 

(9.99999e-06, 1.00000e-05) 

0.010 

a= le-2 

Dx (T) 

9.00000e-01 

(8.91000e-01, 9.00000e-01) 

1.000 

b= le— 1 

D 2 (T) 

1.00000e-01 

(9.93333e-02, 1.00000e-01) 

0.667 

a= 5e-7 

D, (T) 

9.80000e-01 

(9.79999e-01, 9.80000e-01) 

0.000 

b= 2 . 5e— 5 

d 2 (T) 

2.00000e-02 

(2.00000e-02, 2.00000e-02) 

0.000 

a= 5e-7 

D x (T) 

9.99950e-01 

(9.99950e-01, 9.99950e-01) 

0.000 

b= le-2 

d 2 (T) 

5.00000e-05 

( 5.00000e-05, 5.00000e-05) 

0.000 




PROBLEM 3 


F(t) - 


P(G) = 
//(G) = 

o 2 (G) = 

D X (T) = 
D 2 (T) = 



1 - e _xt , t > 0; G(t) = 0, t < 9 

1, t > 9 


Transition Description 


f dG( t) = 1 
' o 

p - 1 (G) f tdG(t) = 9 

'o 

p " 1 (G) f t 2 dG( t) - / j 2 (G) = 9 s - 92 =0 


Death-State Probabilities 


f[l - G(t)]dF(t) = f Xe- xt dt = 1 - e - x 
^0 '0 

f[l - F(t)]dG(t) = 1 - (1 - e- xe ) = e- 

' n 


xe 
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TABLE 3 


X: exponential parameter for the (0,1) transition 
y: impulse parameter for the (0,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X= le-5 

D X (T) 

4.99988e-05 

(0.00000e+00, 5.00000e-05)+ 

100.000 

y= 5.0 

d 2 (T) 

9.99950e-01 

(0.00000e+00, 1.00000e+00)+ 

100.000 

X= le-5 

D x (T) 

1.00000e-09 

(9.90000e-10, 1.00000e-09) 

1.000 

y= le-4 

D 2 (T) 

1.00000e+00 

(9.99900e-01, 1.00000e+00) 

0.010 

X= le-2 

Di (T) 

1.00000e-10 

(9.99900e-ll, 1.00000e-10) 

0.010 

y= le-8 

D 2 (T) 

1.00000e+00 

(1.00000e+00, 1.00000e+00) 

0.000 

X= le-1 

D x (T) 

1.98013e-02 

(1.08557e-02, 2.00000e-02) 

45.177 

y= 2e-l 

D 2 (T) 

9.80199e-01 

(7.80000e-01, 1.00000e+00) 

20.424 

X= 2e-2 

D x (T) 

1.99980e-04 

(1.79980e-04, 2.00000e-04) 

10.001 

y= le— 2 

D 2 (T) 

9.99800e-01 

(9.89800e-01, 1.00000e+00) 

1.000 

X= le-4 

D t (T) 

3.00000e-10 

(2.99480e-10, 3.00000e-10) 

0.173 

y= 3e-6 

D 2 (T) 

1.00000e+00 

(9.99997e-01, 1.00000e+00) 

0.000 

X= le-1 

D X (T) 

1.00000e-08 

(9.99684e-09, 1.00000e-08) 

0.032 

y= le— 7 

d 2 (t) 

1.00000e+00 

(1.00000e+00, 1.00000e+00) 

0.000 

X= 2e-3 

D x (T) 

9.99500e-04 

(2.92393e-04, 1.00000e-03) 

70.746 

r= 5e-l 

D 2 (T) 

9.99000e-01 

( 4.99000e-01, 1.00000e+00) 

50.050 

X= 3e-4 

D X (T) 

2.99955e-04 

( 0.00000e+00, 3.00000e-04)+ 

100.000 

y= 1.0 

D 2 (T) 

9.99700e-01 

( 0.00000e+00, 1.00000e+00)+ 

100.000 

X= 4e-7 

D x (T) 

4.00000e-10 

( 3.87351e-10, 4.00000e-10) 

3.162 

y= le-3 

D 2 (T) 

1.00000e+00 

(9.99000e-01, 1.00000e+00) 

0.100 

+ RECOVERY 

TOO SLOW 




Note that for values of 

y > 0.1, the 

relative error is large. The SURE program 

has difficulty handling general recovery transitions which are slow 

relative to 

the mission 

time. 
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Problem 4a will demonstrate the effect of using a slow exponential transition 
description when the exponential rate is actually fast. Problem 4b will, in 
contrast, show the effect of using means and standard deviations to describe 
slow exponential transition. Problem 4b uses the same model as in 4a except 
the (0, 1) transition is expressed as a general transition with mean and 
standard deviation. To demonstrate the problems associated with improper 
specification of an exponential transition, the same test cases containing a 
wide range of values for the exponential transition are given in Tables 4a and 
4b. 



17 


PROBLEM 4a 



F ( t ) = 1 - e -xt , t > 0 G(t) = t/b, t < b 

1, t > b 


Assumption: b < T 


Transition Descriptions 


p(G) = f dG( t) = 1 
' o 

//(G) = p- 1 (G)f tdG(t) = f tb" 1 dt = b/2 

' o ' o 

a 2 (G) = p- 1 (G) ft 2 dG(t) - /j 2 ( G) = fVb'Mt - b 2 /4 = b 2 /12 

7 n 'o 


Death-State Probabilities 


D X (T) = f [1 - G(t)]dF(t) = fd - t/b)Xe" Xt dt = (Xb + e" 
'0 ' 0 

D 2 (T) = f[l - F(t)]dG(t) = f e" xt b _1 dt - (1 - e' Xb )/( Xb) 

y n / n 


l)/(Xb) 
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TABLE 4a 

X: exponential parameter for the (0,1) transition 
b: uniform parameter for the (0,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X= 

b= 

le-6 

le-4 

D X (T) 

D 2 (T) 

5.00000e-ll 

1.00000e+00 

( 4.95286e-ll, 5.00000e-ll) 
(9.99933e-01, 1.00000e+00) 

0.943 

0.007 

X= 

b= 

le-4 

le-4 

Dj(T) 

D 2 (T) 

5.00000e-09 

1.00000e+00 

(4.95286e-09, 5.00000e-09) 
(9.99933e-01, 1.00000e+00) 

0.943 

0.000 

X= 

b= 

le-5 

le-2 

d x (t) 

d 2 (t) 

5.00000e-08 

1.00000e+00 

(4.52860e-08, 5.00000e-08) 
(9.93333e-01, 1.00000e+00) 

9.428 

0.667 

X= 

b= 

le-7 

le-3 

D X (T) 

D 2 (T) 

5.00000e-ll 

1.00000e+00 

(4.85093e-ll, 5.00000e-ll) 
(9.99333e-01, 1.00000e+00) 

2.981 

0.067 

X= 

b= 

le-2 

le-4 

d x (t) 

d 2 (t) 

5.00000e-07 

1.00000e+00 

(4.95286e-07, 5.00000e-07) 
(9.99933e-01, 1.00000e+00) 

0.943 

0.007 

X= 

b= 

le+2 

le-1 

D,(T) 

D 2 (T) 

9.00005e-02 

9.99955e-01 

(0.00000e+00, 1.00000e+00) !& 
( 0.00000e+00, 1.00000e+00) 

100.000 

100.000 

X= 

b= 

le-4 

le-1 

d x (t) 

d 2 (t) 

4.99998e-06 

9.99995e-01 

( 3.50927e-06, 5.00000e-06) 
(9.33328e-01, 1.00000e+00) 

29.814 

6.667 

X= 

b= 

le-1 

le+3 

d x (t) 

d 2 (t) 

9.90000e-01 

1.00000e-02 

(0.00000e+00, 1.00000e+00)+! 5 
( 0.00000e+00, 1.00000e+00) 

100.000 

100.000 

X= 

b= 

le+2 

le-4 

D X (T) 

D 2 (T) 

4.98337e-03 

9.95017e-01 

( 4.93619e-03, 5.00000e-03) 
(9.94933e-01, 1.00000e+00) 

0.947 

0.501 

X= 

b= 

le+3 

1.0 

D X (T) 

D 2 (T) 

9.99000e-01 

1.00000e-03 

(0.00000e+00, 1.00000e+00) ! 
(0.00000e+00, 1 . 00000e+00 ) 

100.000 

100.000 

X= 

b= 

le+5 

le-3 

D X (T) 

D 2 (T) 

9.90000e-01 
1 . 00000e-02 

(0.00000e+00, 1.00000e+00) I& 
(0.00000e+00, 1.00000e+00) 

100.000 

100.000 

X= 

b= 

le+1 

le-5 

D X (T) 

D 2 (T) 

4.99983e-05 

9.99950e-01 

(4.98493e-05, 5.00000e-05) 
(9.99943e-01, 1.00000e+00) 

0.298 

0.005 

X= 

b= 

le+4 

le+3 

D X (T) 

D 2 (T) 

1.00000e+00 

1.00000e-07 

(0.00000e+00, 1 . 00000e+00 )+! 6 
(0.00000e+00, 1 . 00000e+00 ) 

100.000 

100.000 


+ RECOVERY TOO SLOW 
i RATE TOO FAST 
& STANDARD DEVIATION TOO BIG 
5 DELTA > TIME 

For large values of X(i.e. a fast exponential transition), the bounds separate 
except in cases where the competing recovery rate is very fast. These fast 
exponential rates should be expressed as general transitions with means and 
standard deviations . 
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PROBLEM 4b 



F(t) = 1 - e~ xt , X > 0; G(t) = t/b, t < b 

1, t > b 


Assumption: b < T 


p(F) 

/u(F) 

a 2 (F) 

p(G) 
U(G) 
a 2 (G) 


Transition Description 

f[l - G(t)]dF(t) - fd - t/b)Xe- xt dt = (Xb - 1 + e“ Xb )/(Xb) 

p- 1 f t[l-G(t) ]dF(t) = p- 1 C t(l - t/b)Xe- xt dt = Xb - 2 + Xbe" Xb + 2e" 

X(Xb - 1 + e -Xb ) 


Xb 


D, (T) 
D 2 (T) 


= p" 1 ]” t 2 [l - G(t)]dF(t) - fj 2 (?) = P -f t 2 (l - t/b)Xe~ xt dt = 

2Xb - 6 +°e- Xb [X 2 b 2 + 4Xb + 6] - v 2 (?) 

X 2 (Xb - 1 + e _Xb ) 

= j^[l - F(t)]dG(t) = j^(l/b)e- xt dt = (1 - e _Xb )/( Xb) 

= p _1 Pt[l - F(t) ]dG(t) = p _1 (* (t/b)e _xt dt = 1 - Xbe~ Xb - e _Xb 

X(1 - e" Xb ) 

= p" 1 ]" t 2 [l - F(t)]dG(t) - (j 2 (G) = p' 1 ]* (t 2 /b)e“ xt dt - u 2 (G) = 

2 - e- Xb (X 2 b 2 °+ 2Xb + 2) - /y 2 (G) 

X 2 (1 - e -Ab ) 

Death-State Probabilities 

= f[l - G(t)]dF(t) = fd - t/b)Xe" xt dt = (Xb + e" Xb - l)/(Xb) 

'o ' o 

= f [1 - F(t)]dG(t) = (° e- xt b' 1 dt = (1 - e _Xb )/( Xb) 

' o ) n 
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TABLE 4b 

X: exponential parameter for the (0,1) transition 
b: uniform parameter for the (0,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE 1 

BOUNDS 

% 

ERROR 

X= le-6 

D t (T) 

5.00000e-ll 

(4.99975e-ll, 

5.00000e-ll) 

0.005 

b= le-4 

D 2 (T) 

1.00000e+00 

(9.99933e-01, 

1.00000e+00) 

0.007 

X= le-4 

D 1 (T) 

5.00000e-09 

(4.99975e-09, 

5.00000e-09) 

0.005 

b= le-4 

D 2 (T) 

1.00000e+00 

(9.99933e-01, 

1.00000e+00) 

0.007 

X= le-5 

D X (T) 

5.00000e-08 

(4.97500e-08, 

5.00000e-08) 

0.500 

b= le— 2 

D 2 (T) 

1.00000e+00 

(9.93333e-01, 

1.00000e+00) 

0.667 

X= le-7 

D x (T) 

5.00000e-ll 

(4.99750e-ll, 

5.00000e-ll) 

0.050 

b= le-3 

d 2 (t) 

1.00000e+00 

(9.99333e-01, 

1.00000e+00) 

0.067 

X= le-2 

D X (T) 

5.00000e-07 

(4.99975e-07, 

5.00000e-07) 

0.005 

b= le-4 

D 2 (T) 

1.00000e+00 

(9.99933e-01, 

1.00000e+00) 

0.007 

X= le+2 

D X (T) 

9.00005e-01 

(8.84248e-01, 

9.00005e-01) 

1.751 

b= le-1 

d 2 (t) 

9.99955e-02 

(9.80001e-02, 

9.99955e-02) 

1.995 

X= le-4 

D X (T) 

4.99998e-06 

(4.83345e-06, 

4.99998e-06) 

3.331 

b= le-1 

D 2 (T) 

9.99995e-01 

(9.33381e-01, 

9.99995e-01) 

6.661 

X= le-1 

D X (T) 

9.90000e-01 

(0.00000e+00, 

9.90000e-01)+ 

100.000 

b= le+3 

D 2 (T) 

1.00000e-02 

( 0.00000e+00, 

1.00000e-02) 

100.000 

X= le+2 

D X (T) 

4.98337e-03 

( 4.98313e-03, 

4.98337e-03) 

0.005 

b= le-4 

D 2 (T) 

9.95017e-01 

(9.94950e-01, 

9.95017e-01) 

0.007 

X= le+3 

D X (T) 

9.99000e-01 

(9.97004e-01, 

9.99000e-01) 

0.200 

b= 1.0 

d 2 (t) 

1.00000e-03 

(9.98000e-04, 

1.00000e-03) 

0.200 

X= le+5 

D X (T) 

9.90000e-01 

(9.89980e-01, 

9.90000e-01) 

0.002 

b= le-3 

d 2 (t) 

1.00000e-02 

(9.99980e-03, 

1.00000e-02) 

0.002 

X= le+1 

D : (T) 

4.99983e-05 

(4.99982e-05, 

4.99983e-05) 

0.000 

b= - le— 5 

d 2 (t) 

9.99950e-01 

(9.99943e-01, 

9.99950e-01) 

0.001 

X= le+4 

D X (T) 

1 . 00000e+00 

( 9.99800e-01, 

1.00000e+00) 

0.020 

b= le+3 

D 2 (T) 

1.00000e-07 

(9.99800e-08, 

1.00000e-07) 

0.020 


+ RECOVERY TOO SLOW 


The analytic solutions for the means and standard deviations were extremely 
numerically unstable for small values of X and b. Consequently, Taylor series 
expansion was used to reduce the form of the statistics used in the input files 
for the cases where X and b were small. 
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PROBLEM 5 



F(t) = 1 - e~ xt , t > 0; G(t) - 1 - e~ at , t > 0 


Death-State Probability 


D 2 (T) ~ f f Xe -Xx ae _<xy dydx = (-X + a - ae“ XT + Xe “ T )/(a - X) 
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TABLE 5 


X: exponential parameter for the (0,1) transition 
a: exponential parameter for the (1,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

X= 

OF* 

le-4 

le-3 

D 2 (T) 

4.98171e-06 

x= 

06= 

le-6 

le-1 

D 2 (T) 

3.67878e-06 

x= 

OF= 

le-2 

1.0 

d 2 (t) 

8.60233e-02 

x= 

cc= 

le-3 

le-5 

d 2 (t) 

4.98321e-07 

X= 

oc= 

1.0 

le-6 

d 2 (t) 

9.00000e-06 

X= 

06= 

le-1 

le-7 

D 2 (T) 

3.67879e-07 

X= 

oe= 

2e-5 

3e-5 

D 2 (T) 

2.99950e-08 

X= 

06= 

le-2 

2e-2 

d 2 (T) 

9.05592e-03 

X= 

06= 

8e-7 
8 . 5e-7 

D 2 (T) 

3.39999e-ll 

X= 

C6= 

le-7 

2e-2 

d 2 (t) 

9.36537e-08 


SURE BOUNDS % 

ERROR 


(4.98167e-06, 

5.00000e-06 ) 

0.367 

( 3.67878e-06, 

3.67878e-06) 

0.000 

(8.60233e-02, 

8.60233e-02) 

0.000 

(4.98317e-07, 

5.00000e-07) 

0.337 

(9.00000e-06, 

9.00000e-06) 

0.000 

(3.67879e-07, 

3.67879e-07) 

0.000 

(2.99950e-08, 

3.00000e-08) 

0.017 

(9.00000e-03, 

1.00000e-02) 

10.425 

( 3 . 39998e-ll, 

3.40000e-ll) 

0.000 

(9.33333e-08, 

1.00000e-07) 

6.776 


PROBLEM 6 


F(t) = 


P(F) = 
P(F) = 
P 2 ( F) = 

D 2 (T) = 



0, t < a; G(t) = 1 - e _Xt , t > 0 

1, t > a 


Transition Description 


f dF( t) = 1 
' o 

p _1 (F) f° tdF(t) = a 

'0 

p _1 (F)J” t 2 dF(t) - /j 2 (F) = a 2 - a 2 =0 


Death-State Probability 


r 

' n 


r 

s n 


Xe _x ^dydF(x) 


1 _ e -X( T-a ) 
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TABLE 6 


a: impulse parameter for the (0,1) transition 
X: exponential parameter for the (1,2) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

a= le-4 
X= 1.0 

D 2 (T) 

9.99955e-01 

a= 1.0 
X= le-2 

d 2 (t) 

8.60688e-02 

a= le-4 
X= le-4 

d 2 (t) 

9.99490e-04 

a= le-8 
X= le-1 

d 2 (t) 

6.32121e-01 

a= le-1 
X= le-8 

d 2 (t) 

9.90000e-08 

a= 2e-5 
X= le-6 

d 2 (t) 

9.99993e-06 

a= 4e-5 
X= 3e-2 

d 2 (t) 

2.59181e-01 

a= 3e-7 
X= 2e-4 

d 2 (t) 

1.99800e-03 

a= le-6 
X= le-5 

d 2 (t) 

9.99950e-05 

a= l.le-3 
X= le-3 

d 2 (t) 

9.94908e-03 

a= 3e-4 
X= 2e-3 

d 2 (t) 

1.98007e-02 

a= 2e-4 
X= le-7 

d 2 (t) 

9.99980e-07 


SURE BOUNDS % 

ERROR 


(9.99854e-01, 

9.99955e-01) 

0.010 

( 0.00000e+00, 

1.00000e-01)+ 

100.000 

(9.98401e-04, 

1.00000e-03) 

0.109 

(6.32117e-01, 

6.32121e-01) 

0.001 

(8.71539e-08, 

1.00000e-07) 

11.966 

(9.99528e-06, 

1.00000e-05) 

0.047 

(2.59031e-01, 

2.59182e-01) 

0.058 

(1.99789e-03, 

2.00000e-03) 

0.100 

(9.99849e-05, 

1.00000e-04) 

0.010 

(9.90626e-03, 

1.00000e-02) 

0.512 

(1.97601e-02, 

2.00000e-02) 

1.006 

( 9.98386e-07, 

1 . 00000e-06 ) 

0.159 


+ RECOVERY TOO SLOW 


PROBLEM 7 
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TABLE 7 


\ : exponential parameter 
X 2 : exponential parameter 
X 3 : exponential parameter 


for the (0,1) transition 
for the (1,2) transition 
for the (1,3) transition 


PARAMETERS DEATH 

ANALYTIC 

SURE BOUNDS 

% 

STATES 

SOLUTIONS 


ERROR 


le-2 


X 2 =■= le-3 

D 2 (T) 

4.81958e-04 

(4.81500e-04, 

5.00000e-04) 

3.743 

X 3 = le-4 

D 3 (T) 

4.81958e-05 

(4.81500e-05, 

5.00000e-05) 

3.743 

\ = le-7 

X 2 = le-2 

D 2 (T) 

4.83726e-08 

( 4.83316e-08, 

5.00000e-08) 

3.364 

X 3 = le-5 

D 3 (T) 

4.83726e-ll 

(4.83317e-ll, 

5.00000e-ll) 

3.364 

\ = le-5 

X 2 = 2e-5 

D 2 (T) 

9.99733e-09 

(9.99733e-09, 

1.00000e-08) 

0.027 

X 3 = 5e-5 

D 3 (T) 

2.49933e-08 

(2.49933e-08, 

2.50000e-08) 

0.027 

X 1 = le-6 

X 2 = le-7 

d 2 (t) 

4.83740e-12 

( 4.83332e-12, 

5.00000e-12) 

3.361 

X 3 = le-2 

Dj(T) 

4.83740e-07 

(4.83332e-07, 

5.00000e-07) 

3.361 

le-1 

X 2 = le-7 

d 2 (t) 

3.67879e-07 

( 3.67879e-07 , 

3.67879e-07) 

0.000 

X 3 = 2e-7 

d 3 (t) 

7 . 35758e-07 

( 7 . 35758e-07 , 

7 . 35758e-07 ) 

0.000 

X x = le-2 

X 2 = 5e-5 

d 2 (t) 

2.41830e-05 

(2.41625e-05, 

2 . 50000e-05 ) 

3.378 

X 3 = 3e-8 

d 3 (t) 

1 . 45098e-08 

(1.44975e-08, 

1.50000e-08) 

3.378 
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PROBLEM 8 



F(t) = 1 - e -xit , t > 0; G(t) = 1 - e~ X2t , t > 0; H(t) = t/b, t < b 

1, t > b 


Assumption: b < T 


Transition Description 


p(H) = f dH(t) = 1 
'o 

/j(U) = p- 1 (H) ftdH(t) = b~ x ftdt = b/2 

' o ' o 

a 2 (H) = p- 1 (H) f t 2 dH( t) - fj 2 (H) = b' 1 f t 2 dt - b 2 /4 = b 2 /12 
'0 '0 


Death-State Probabilities 


D 2 (T) = f f“ X X 1 e- xlx X 2 e- X2 v [1 - H(y) ]dydx 
' o ' o 

= \\ f e _xl x f e" X2y (1 - y/b)dydx = [1 - (1 - e~ X2b )/( X 2 b) ] ( 1 - e~ xlT ) 
J o ' o 

D 3 (T) = f f X 1 e~ Xix e" X2y dH(y)dx = X^ -1 C e _xlx P e _X2y dydx 
'0 '0 '0 ' 0 

- (1 - e _X2b ) ( 1 - e‘" xlT )/( X 2 b) 
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TABLE 8 


\ : exponential parameter for the (0,1) transition 
Xj : exponential parameter for the (1,2) transition 
b: uniform parameter for the (1,3) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE 1 

BOUNDS 

% 

ERROR 

4e-3 
X 2 =» 3e-3 
b» le-5 

D 2 (T) 

D 3 (T) 

5.88160e-10 

3.92107e-02 

( 5.86118e-10, 
( 3.91912e-02, 

6.00000e-10) 

4.00000e-02) 

2.013 

2.013 

X 1 = 5e-6 
X 2 = 3e-6 
b= le-3 

D 2 (T) 

D 3 (T) 

7.49981e-14 

4.99987e-05 

(7.25994e-14, 

(4.98537e-05, 

7.50000e-14) 

5..00000e-05) 

3.198 

0.290 

X.= 5e-4 
X 2 = 2e-3 
b= le-4 

D 2 (T) 

D 3 (T) 

4.98752e-10 

4.98752e-03 

( 4.93699e-10, 
(4.98365e-03, 

5.00000e-10) 

5.00000e-03) 

1.013 

0.250 

X,= 3e-2 
* 2 - 2e-2 
b* le-6 

D 2 (T) 

D 3 (T) 

2.59182e-09 

2.59182e-01 

(2.58922e-09, 

(2.59166e-01, 

2.59182e-09) 

2.59182e-01) 

0.100 

0.006 

X 1 = le-2 
Xj= le-5 
b= le-3 

D 2 (T) 

d 3 (t) 

4.75813e-10 

9.51626e-02 

(4.59862e-10, 

(9.47355e-02, 

5.00000e-10) 

1.00000e-01) 

5.083 

5.083 

X,= 3e-6 
X 2 = 2e-6 
b= le-6 

d 2 (t) 

d 3 (t) 

2.99996e-17 

2.99996e-05 

(2.99691e-17, 

(2.99974e-05, 

3.00000e-17) 

3.00000e-05) 

0.102 

0.007 

X.= le-3 
X 2 = le-2 
b= le-7 

d 2 (t) 

d 3 (t) 

4.97508e-12 

9.95017e-03 

( 4.97341e-12, 
(9.94978e-03, 

5.00000e-12) 

1.00000e-02) 

0.501 

0.501 

X,= 2e-5 
X 2 = 2e-5 
b= 2e-5 

Dj(T) 

d 3 (t) 

3.99960e-14 

1.99980e-04 

( 3.98148e-14, 
(1.99914e-04, 

4.00000e-14) 

2.00000e-04) 

0.453 

0.033 

X,= 5e-5 
X 2 = 4e-5 
b= le-1 

D 2 (T) 

d 3 (t) 

9.99749e-10 

4.99874e-04 

(6.85995e-10, 

(4.56119e-04, 

1.00000e-10) 
5.00000e-04 ) 

31.383 

8.753 

2e-3 
X 2 = le-6 
b= le-1 

d 2 (t) 

d 3 (t) 

9.90066e-10 

1.98013e-02 

(6.79455e-10, 

(1.80709e-02, 

1.00000e-09) 

2.00000e-02) 

31.373 

8.739 

X 1= 8e-2 
X 2 = 7e-2 
b= le-3 

d 2 (t) 

d 3 (t) 

1.92730e-05 

5.50652e-01 

(1.86711e-05, 
( 5.49481e-01, 

1.92735e-05) 

5.50671e-01) 

3.123 

0.213 

\= 4e-4 
X 2 = 3e-4 
b= 1 

d 2 (t) 

d 3 (t) 

5.98742e-07 

3.99141e-03 

( 3.17732e-08, 
(1.23619e-03, 

6.00000e-07) 

4.00000e-03) 

94.693 

69.029 


Here, SURE's bounds separated in cases where the recovery rate was slow. 



PROBLEM 9 


F(t) =1- 
As sumption: 

p(G) = f [ 

'o 

//(G) = p" 1 

cr 2 (G) = p " 1 

P(H) = f [ 
'o 

//(H) = p" 1 

P 2 (H) = p" 1 

d 2 ( t ) = r 

'0 

d 3 (t) = r 

' o 



e~ xt , t > 0; G(t) - 0, t < a; H(t) - t/b, t < b 

1, t > a; 1, t > b 


a < b < T 


Transition Description 


1 - H(t)]dG(t) - 1 - H(a) = (b - a)/b 

(G)ft[l - H(t)]dG(t) = b(b - a) -1 [a(l - H(a))] = a 
'o 

(G) f° t 2 [ 1 - H(t)]dG(t) - fj 2 ( G) = b(b - a) -1 [a 2 (1 - H(a))] - a 2 
'0 

1 - G(t)]dH(t) = P (l/b)dt = a/b 
'o 

(H) f t[l - G(t)]dH(t) = (b/a) P (t/b)dt = a/2 
^0 '0 

(H) ft 2 [1 - G(t) ]dH(t) - /j 2 (H) = (b/a) P (t 2 /b)dt - a 2 /4 = a 2 /12 


Death-State Probabilities 


f Xe" Xx [l - H(y)]dG(y)dx = xT e' Xx (l - a/b)dx 
'0 '0 

= (b - a)(l - e _XT )/b 

f Xe _Xx [1 - G(y) ]dH(y)dx = xPe'^ P ( l/b)dx = a( 1 - e _XT )/b 

' o ' n / n 
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TABLE 9 


X: exponential parameter for the (0,1) transition 
a: inpulse parameter for the (1,2) transition 
b: uniform parameter for the (1,3) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X= 

a= 

le-2 

le-7 

D 2 (T) 

9.51531e-02 

(9.49876e-02, 9.99900e-02) 

5.083 

b= 

le-3 

D 3 (T) 

9.51626e-06 

( 9 . 49980e-06 , l._00000e-05) 

5.083 

X- 

a= 

le-3 

le-3 

d 2 (t) 

8.95515e-03 

(8.91790e-03, 9.00000e-03) 

0.501 

b= 

le-2 

D 3 (T) 

9.95017e-04 

(9.92124e-04, 1.00000e-03) 

0.501 

X= 

a* 

le-6 

le-2 

D 2 (T) 

4.99998e-06 

( 4.90048e-06, 5.00000e-06) 

1.990 

b= 

2e-2 

D 3 (T) 

4 . 99998e-06 

( 4.93152e-06, 5.00000e-06) 

1.369 

X=* 

a= 

le-1 

le-6 

D 2 (T) 

5.68909e-01 

(5.68875e-01, 5.68909e-01) 

0.006 

b= 

le-5 

D 3 (T) 

6.32121e-02 

(6.32094e-02, 6.32121e-01) 

0.004 

0) x 
ii u 

le-2 

le-5 

d 2 (t) 

6.34417e-02 

(6.33137e-02, 6.66667e-02) 

5.083 


3e-5 

D 3 (T) 

3.17209e-02 

( 3.16597e-02, 3.33333e-02) 

5.083 

ii ii 

le-4 

le-7 

d 2 (t) 

9.99499e-04 

(9.99467e-04, 9.99999e-04) 

0.050 

b= 

le-1 

D 3 (T) 

9.99500e-10 

(9.99478e-10, 1.00000e-09) 

0.050 

X= 

a* 

le-4 

le-6 

d 2 (t) 

8.99550e-04 

(8.99459e-04, 9.00000e-04) 

0.050 

b= 

le-5 

D 3 (T) 

9.99500e-05 

(9.99429e-05, 1.00000e-04) 

0.050 

X= 

a= 

le-1 

le-3 

D 2 (T) 

5.68909e-01 

( 5.67292e-01, 5.68909e-01) 

0.284 

b= 

le-2 

D 3 (T) 

6.32121e-02 

(6.30876e-02, 6.32121e-02) 

0.197 

X= 

a= 

le-6 

le-7 

d 2 (t) 

8.99996e-06 

(8.99967e-06, 9.00000e-06) 

0.003 

b= 

le-6 

D 3 (T) 

9.99995e-07 

(9.99973e-07, 1.00000e-06) 

0.002 



<§> 


PROBLEM 10 


h 




F(t)= 1 - e" xlt ; G(t) - 1 - e _X2t ; H(t) = 1 - e~ X3t , I ( t) = 0, t < a 

t > 0; t > 0; t > 0; 1, t > a 

Assumption: a < T 





Transition Description 


p(I) = f dl( t) = 1 
' o 

JU( I) = p- 1 (I) f tdl(t) = a 
'o 

a 2 (I) = p" 1 (I)J° t 2 dl ( t ) - n 2 (I) = a 2 - a 2 = 0 


Death-State Probabilities 


D 2 (T) = r r Xj© Xlx \ 2 e (>^2 + X3)y[i _ x ( y ) ] dydx 
'0 ' 0 

= \\ 2 f e -xix r e _(X2 + X3 )y dydx = ^(1 - e -(X2+X3,a )(l - e~ x 1 T )/( X, +X, 

'0 'O 

D 3 (T) = C r X, e _xix X 3 e" < X2 + X3 ( y [ 1 - I(y)]dydx 
'o 'o 

= X 3 X 3 r e -xix f e _<X2 + X3 >ydydx = X 3 (1 - e _(X2 + X3 )a )(1 - e~ xlT )/(X,+X, 


/T /r - x 

°4 ( t ) = I J \e- 


X 1 e ~ ( X 2 + X 3 


>ydl(y)dx = e~ xi e _ ( X2 + X3 > a dx 


— 0 “ ( X2 + X3 ) a ^ __ 0 - 


X 1 T 
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TABLE 10 


\ : exponential parameter for the ( 0 
X 2 : exponential parameter for the ( 1 
X 3 : exponential parameter for the ( 1 
a: impulse parameter for the (1,4) 

PARAMETERS DEATH ANALYTIC 
STATES SOLUTIONS 

,1) transition 
,2) transition 
,3) transition 
transition 

SURE BOUNDS 

% 

ERROR 

\- 
X 2 = 

5e-4 

4e-4 

D 2 (T) 

1.99501e-12 


(1.99281e-12, 2.00000e-12) 

0.250 

X 3 = 

3e-4 

D 3 (T) 

1.49626e-12 


(1.49460e-12, 1.50000e-12) 

0.250 

a= 

le-6 

d 4 (T) 

4.98752e-03 


(4.98700e-03, 5.00000e-03) 

0.250 

\- 
X 2 = 

le-3 

le-5 

D 2 (T) 

9.95017e-14 


(9.93906e-14, 1.00000e-13) 

0.501 

X 3 50 

le-4 

d 3 (t) 

9.95012e-13 


(9.93906e-13, 1.00000e-12) 

0.501 


le-6 

D 4 (T) 

9.95017e-03 


(9.94900e-03, 1.00000e-02) 

0.501 

\- 
X 2 = 

3e-3 

2e-3 

d 2 (t) 

1.18218e-09 


(1.17620e-09, 1.20000e-09) 

1.507 

Xj- 

le-5 

Dj(T) 

5. 91089e-12 


( 5.88098e-12, 6.00000e-12) 

1.508 

a= 

2e-5 

D 4 (T) 

2.95545e-02 


(2.95364e-02, 3.00000e-02) 

1.507 


2e-2 

2e-3 

d 2 (t) 

3.62495e-05 


(2.39169e-05, 4.00000e-05) 

34.021 

X 3 = 

4e-4 

D 3 (T) 

7.24990e-06 


( 4.78339e-06, 8.00000e-06) 

34.021 

a= 

le-1 

D 4 (T) 

1.81226e-01 


( 1 . 57386e-01 , 2.00000e-01) 

13.155 

xj= 

5e-6 

4e-6 

d 2 (t) 

1.99994e-13 


(1.93057e-13, 2.00000e-13) 

3.469 

X 3 = 

le-2 

D 3 (T) 

4.99985e-10 


( 4.82643e-10, 5.00000e-10) 

3.469 

a= 

le-3 

d 4 (t) 

4.99983e-05 


(4.97903e-05, 5.00000e-05) 

0.416 

r- 

le-1 

le-1 

D 2 (T) 

3.16060e-08 


( 3.15824e-08, 3.16060e-08) 

0.075 

X 3 = 

2e-5 

d 3 (T) 

6.32121e-12 


(6.31648e-12, 6.32121e-12) 

0.075 

a= 

5e-7 

D 4 (T) 

6.32121e-01 


(6.32094e-01, 6.32121e-01) 

0.004 

x i = 
X 2 = 

3e-6 

2e-6 

d 2 (t) 

5.99991e-19 


( 5.99925e-19, 6.00000e-19) 

0.011 

X 3 = 

le-2 

d 3 (T) 

2.99700e-15 


(2.99963e-15, 3.00000e-15) 

0.010 

a= 

le-8 

D 4 (T) 

2.99996e-05 


(2.99992e-05, 3.00000e-05) 

0.001 

x i = 
X 2 = 

2e-2 

le-8 

D 2 (T) 

1.81269e-12 


(1.73818e-12, 2.00000e-12) 

10.333 

X 3 = 

4e-5 

d 3 (T) 

7.25077e-09 


(6.95271e-09, 8.00000e-09) 

10.333 

a= 

le-3 

D 4 (T) 

1.81269e-01 


(1.79314e-01, 2.00000e-01) 

10.333 

x i = 
X 2 = 

4e-5 

3e-5 

D 2 (T) 

1.19976e-09 


(1.19844e-09, 1.20000e-09) 

0.110 

X 3 = 

4e-5 

D 3 (T) 

1.59967e-09 


(1.59791e-09, 1.60000e-09) 

0.110 

a= 

le-6 

D 4 (T) 

3.99917e-04 


( 3.99877e-04, 4.00000e-04) 

0.010 
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PROBLEM 11 



h 







F(t) = 1 - e _xit ; G(t) = 1 - e -X2t ; H(t) = 1 - e" X3t 


t > 0; 


t > 0; 


t > 0 


Death-State Probability 


D 3 (T) 



= 1 - e _xlT 


Y X 1 e -xlx X 2 e -X2y X 3 e _X3z dzdydx 

- X, (e- xlT + e- X2T ) - X, (1 - e~ X2T ) + X, X, (1 - e~ X3T ) 
(— Xj + X 2 ) (— ■ X 2 + X 3 ) X 3 (— X 2 + X 3 ) 
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TABLE 11 


X 1 : exponential parameter 
Xj : exponential parameter 
X 3 : exponential parameter 


for the (0,1) transition 
for the (1,2) transition 
for the (2,3) transition 


PARAMETERS 

DEATH 

STATES 

X. = le-4 
X 2 = le-5 
X 3 = le— 6 

D 3 (T) 

\= le-1 
X 2 = le-2 
X 3 = le-3 

d 3 (t) 

X 3 = 3e-4 
X 2 = 2e-4 
X 3 = le-4 

d 3 (T) 

X,= 6e-6 
Xj= le-2 
X 3 = 5e— 4 

D 3 (T) 

X 1 = 3e-l 
X 2 = 2e-l 
X 3 = le-1 

d 3 (T) 

X 1= 5e-2 
X 2 = 3e-2 
X 3 = 2e-2 

d 3 (T) 

X 3 = le-7 
X 2 = le-4 
X 3 = le-1 

d 3 (T) 

X 3 = 4e-2 
X 2 = 6e-4 
X 3 = 8e-6 

d 3 (T) 

X 1= le-3 
X 2 = le-6 
X 3 = le-7 

d 3 (T) 


ANALYTIC 

SOLUTIONS 


1.66629e-13 


1.28398e-04 


9.98501e-10 


4.87126e-09 


2.52580e-01 


3.90668e-03 


1.32086e-10 


2.89949e-08 


SURE BOUNDS 

(1.66620e-13, lV66667e-13 ) 
(1.28398e-04, 1.28398e-04) 
(9.98500e-10, 1.00000e-09) 
(4.86867e-09, 5.00000e-09) 
(2.52580e-01, 2.52580e-01) 
(3.90668e-03, 3.90668e-03) 
(1.32086e-10, 1.32086e-10) 
(2.89949e-08, 2.89949e-08) 


% 

ERROR 

0.023 

0.000 

0.150 

2.643 

0.000 

0.000 

0.000 

0.000 


1.66264e-14 


(1.66250e-14, 1.66667e-14) 


0.242 



PROBLEM 12 



F(t) = 1 - e~ xit ; G(t) = 1 - e _X2t ; H(t) - 1 - e - X3t ? I(t) = 0, t < a 

t > 0; t > 0; t > 0; 1, t > a 

Assumption: a < T 


Transition Description 


p(I) = f dl(t) = 1 
'0 

fj(l) - p-Ml)ftdi(t) - a 
' o 

a 2 (I) = p' 1 (I)J° t 2 dl ( t ) - fj 2 (I) = a 2 - a 2 = 0 


Death-State Probabilities 


D, (T) = 


= J J f \e xlx X 2 e X2y X 3 e -X3z [l - I(z)]dzdydx 
' 0 '0 '0 

= X 1 X 2 X 3 j* e~ xi * j 1 e _X2y J a e' X3z dzdydx 


- X x (l - e - X3a )(e- xlT - e -X2T )/( X 2 - 


D 4 (T) = C C C X 1 e -xlx X 2 e X2y e _X3z dI(z)dydx 
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TABLE 12 


exponential parameter for the (0,1) transition 
Xj : exponential parameter for the (1,2) transition 
X 3 : exponential parameter for the (2,3) transition 
a: inpulse parameter for the (2,4) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X 1 = 5e-5 
X 2 = 4e-5 
X 3 = 3e-5 
a= le-7 

D 3 (T) 

D 4 (T) 

2.99910e-19 

9.99700e-08 

(2.99796e-19, 3 .'00000e-19 ) 
(9.99637e-08, 1.00000e-07) 

0.038 

0.030 

X x = 3e-2 
X 2 = 2e-2 
X3 = le-2 
a= le-6 

d 3 (t) 

D 4 (T) 

2.54442e-10 

2.54442e-02 

(2.54141e-10, 2.54442e-10) 
(2.54395e-02, 2.54442e-02) 

0.118 

0.018 

\ = le-5 
X2= le-3 
X 3 = le-2 
a= le-1 

d 3 (t) 

D 4 (T) 

4.98072e-10 

4.97823e-07 

(3.19326e-10, 5.00000e-10) 
( 4.20146e-07, 5.00000e-07) 

35.888 

15.603 

X 1 = 4e-4 
X 2 = 3e-4 
X 3 = le-4 
a= le-2 

d 3 (t) 

d 4 (t) 

5.98602e-12 

5.98601e-06 

(5.28031e-12, 6.00000e-12) 
( 5.80834e-06, 6.00000e-06) 

11.789 

2.968 

X^ le-1 
X 2 = le-4 
X 3 = le-7 
a= le-5 

d 3 (t) 

d 4 (t) 

3.67747e-16 

3.67747e-04 

( 3.66385e-16, 3.67747e-16) 
( 3.67544e-04, 3.67747e-04) 

0.370 

0.055 

X 4 = 6e-7 
Xj = 5e-7 
X 3 = le-1 
a= le-4 

d 3 (t) 

D 4 (T) 

1. 49999e-16 
1.50000e-ll 

(1.48202e-16, 1.50000e-16) 
( 1 . 49683e-ll , 1.50000e-ll) 

1.198 

0.21 

\= 3e-5 
X 2 = 2e-6 
X 3 = 4e-7 
a= 1.0 

D 3 (T) 

d 4 (t) 

1.19987e-15 

2.99968e-09 

(0.00000e+00, 1.20000e-15)+ 
( 0.00000e+00, 3.00000e-09) 

100.000 

100.000 

X 3 = 5e— 6 
X 2 = 4e-6 
X 3 = 5e-6 
a= 4e-6 

Dj(T) 

D 4 (T) 

1.99994e-20 

9.99970e-10 

(1.99514e-20, 2.00000e-20) 
(9.99566e-10, 1.00000e-09) 

0.240 

0.040 


+ RECOVERY TOO SLOW 


The bounds again tended to separate in cases where the recovery transition was 
slow with respect to the mission time. 


PROBLEM 13 



F(t) - 1 - e- xlt , t > 0; G(t) = 1 - e- X2t , t > 0; H(t) = 


Assumption: a < T 


Transition Description 


p(H) 
/v(H) 
a 2 (H) 


f dH( t) = 1 

'o 

p- 1 (H) f tdH(t) = a 
'o 

p- 1 (H) f t 2 dH( t) - /j 2 (H) 

' n 


a 2 - a 2 = 0 


Death-State Probabilities 


D 2 (T) = f f * \e- xlx \ 2 e~ X2 y [1 - H(y) ]dydx = \ X 2 j%- Xllt 

= (1 - e~ X2a )(1 


D (T) = f f r X 1 e -Xlx e -Xly X 1 e -xlz dzdH(y)dx 
'o ' o 'o 

0 — X 2 a 0 ~ X 2 a - X 1 T ^ TG~" ^ 2 a — XI ( T — a ) 


0, t < a 

1, t > a 


x 2 y dydx 
• e- xlT ) 
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TABLE 13 


\ : exponential parameter for the (0,1) and (3,4) transitions 
Xj : exponential parameter for the (1,2) transition 
a: impulse parameter for the (1,3) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE 1 

BOUNDS 

% 

ERROR 

II H 

AA 

le-5 

le-4 

D 2 (T) 

9.99950e-15 

(9.98850e-15, 

1.00000e-14) 

0.110 

a» 

le-6 

D 4 (T) 

4.99967e-09 

(4.99866e-09, 

5._00000e-09) 

0.020 

*2 = 

3e-4 

2e-4 

d 2 (t) 

5.99101e-14 

( 5.98892e-14, 

6.00000e-14) 

0.035 

a= 

le-7 

d 4 (T) 

4.49101e-06 

(4.49072e-06, 

4.50000e-06) 

0.200 

n H 

AA 

2e-3 

le-2 

d 2 (t) 

7.92053e-09 

(7.86498e-09, 

8.00000e-09) 

1.003 

a= 

4e-5 

d 4 (t) 

1.97352e-04 

(1.97078e-04, 

2.00000e-04) 

1.342 

ii H 

aa 

le-2 

le-5 

D 2 (T) 

9.51626e-10 

(9.17202e-10, 

1.00000e-09) 

5.083 

a* 

le-3 

D 4 (T) 

4.67794e-03 

(4.63361e-03, 

5.00000e-03) 

6.885 

\- 

x,= 

5e-7 

3e-7 

D 2 (T) 

1.50000e-13 

(9.93222e-14, 

1.50000e-13) 

33.78 

a= 

le-1 

d 4 (T) 

1.22500e-ll 

(1.05497e-ll, 

1.25000e-ll) 

13.880 


le-1 

le-1 

d 2 (t) 

6.32121e-08 

(6.31452e-08, 

6.32121e-08) 

0.106 

a= 

le-6 

D 4 (T) 

2.64241e-01 

(2.64204e-01, 

2.64241e-01) 

0.014 

n n 
AA 

3e-2 

2e-2 

D 2 (T) 

1.03652e-04 

(8.79090e-05, 

1.03673e-04) 

12.050 

a= 

2e-2 

D 4 (T) 

3.67882e-02 

(3.52637e-02, 

3.69363e-02) 

4.144 

H ii 

AA 

4e-4 

3e-4 

D 2 (T) 

5.98353e-06 

( 0.00000e+00, 

6 . 00000e-06 )+ 

100.000 

a= 

5.0 

d 4 (T) 

2.65735e-09 

( 0.00000e+00, 

8.00000e-06) 

100.000 

H n 

AA 

3e-3 

le-3 

d 2 (T) 

2.95397e-05 

( 0.00000e+00, 

3 . 00000e-05 )+ 

100.000 

a= 

1.0 

d 4 (T) 

3.53276e-04 

(0.00000e+00, 

4 . 50000e-04 ) 

100.000 

\= 
* 2 = 

3e-5 

2e-5 

d 2 (t) 

2.99955e-10 

(2.27676e-10, 

3 . 00000e-10 ) 

24.097 

a= 

5e-2 

d 4 (t) 

4 . 45411e-08 

( 4 . 08515e-08 , 

4 . 50000e-08 ) 

8.284 


+ RECOVERY TOO SLOW 


Note that the large relative error occurred in cases where the recovery rate 
was slow. 
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PROBLEM 14 



F(t) = 1 - e -xit ; G(t) = 1 - e- X2t ; H(t) = 0, t < a; I(t) = 1 - e~ X3t 

t > 0; t > 0; 1, t > a; t > 0 

Assumption: a < T 


Transition Description 


p(H) 
^(H) 
P 2 (H) 


f dH( t) = 1 
'o 

p-MH)f tdH(t) = a 
'o 

p- 1 (H) f t 2 dH( t) - u 2 (H) = a 2 - a 2 =0 
''o 

Death-State Probabilities 


d 2 (T) = f f \e- xlx X 2 e- (X2 + X3 »y [1 - H(y)]dydx 
'o ' o 

= X 3 X 2 r e -xix P e _(X2 + X3, y dydx = X 2 (l - e -(X2+X3)a )(l - e -xlT )/( X, +X, 
'o 'o 2 3 


D 4 (T) = r C X 1 e xlx X 3 e _(X 2 (' X 3 ,y [l-H(y) ]dydx 
'a ' o 

+ | P P X 1 e _xlx e _(X2 + X3,y X 1 e _xlz dzdH ( y ) dx 

J o 'o -’o 

= X 3 (1 - e - (X2 + X3 > a )(1 - e _xlT )/( X 2 +X 3 ) 

+ X 1 e~ (X2 + X3)a [(l - e* xlT )/\ - Te~ xl < T - a > ] 
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TABLE 14 


\ : exponential parameter for the (0,1) and (3,4) transitions 
Xj : exponential parameter for the (1,2) transition 
X 3 : exponential parameter for the (1,4) transition 
a: impulse parameter for the (1,3) transition 


PARAMETERS 

DEATH 

analytic 


STATES 

SOLUTIONS 

X 1 = 4e-3 
X 2 = 3e-3 

D 2 (T) 

1.17632e-09 

X 3 = 2e-3 
a= le-5 

d 4 (T) 

7.78982e-04 

3e-2 
X 2 = 2e-2 
X 3 = le-1 

d 2 (T) 

5.18363e-08 

a= le-5 

D 4 (T) 

3.69365e-02 

X 1 = 5e-5 
X 2 = 4e-5 

d 2 (t) 

1.99949e-ll 

X 3 = le-2 
a= le-3 

d 4 (T) 

1.29931e-07 

le-3 
X 2 = le-3 

d 2 (t) 

4.97508e-ll 

X 3 = le-6 
a= 5e-6 

d 4 (T) 

4.96679e-05 

2e-3 
X 2 = 3e-6 
X 3 = le-4 

d 2 (T) 

1.18808e-12 

a= 2e-5 

d 4 (T) 

1.97353e-04 

le-6 
X 2 = le-1 
X 3 = 2e-3 

d 2 (t) 

3.99916e-09 

a= 4e-3 

d 4 (T) 

1.29923e-10 


SURE BOUNDS % 

ERROR 


(1.17192e-09, 

1.20000e-09) 

2.013 

(7.78174e-04, 

8V00001e-04 ) 

2.698 

( 5.16584e-08, 

5.18364e-08) 

0.343 

( 3.69151e-02, 

3.69366e-02) 

0.058 

(1.93014e-ll, 

2.00000e-ll) 

3.468 

(1.28869e-07, 

1.30000e-07) 

0.817 

(4.96277e-ll, 

5.00000e-ll) 

0.501 

( 4.96443e-05, 

5.00000e-05) 

0.669 

(1.18216e-12, 

1.20000e-12) 

1.003 

(1.97154e-04, 

2.00000e-04) 

1.342 

(3.72249e-09, 

4.00000e-09) 

6.918 

(1.23601e-10, 

1.30000e-10) 

4.874 
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TABLE 14 (Continued) 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X, = 8e-6 

X,= 7e-6 

D 2 (T) 

2.79989e-15 

(2.79300e-15, 2.80000e-15) 

0.246 

X 3 = le-2 
a= 5e-6 

d 4 (t) 

3.20383e-09 

( 3.20237e-09, 3.20400e-09) 

0.046 

X, = 3e-2 

X 2 = 2e-2 

D 2 (T) 

5.13212e-03 

( 0.00000e+00, 5.18364e-03)+ 

100.000 

X 3 = le-5 
a= 1 . 0 

d 4 (T) 

2.95728e-02 

( 0.00000e+00, 3.69389e-02)+ 

100.000 

X.= le-3 
X,= le-2 

d 2 (T) 

9.89564e-06 

(6.53643e-06, 1.00000e-05) 

33.946 

X 3 = le-1 
a= le-1 

D 4 (T) 

1.47102e-04 

(1.06778e-04, 1.50000e-04) 

27.412 

X, = 6e-4 

X 2 = 5e-4 

d 2 (t) 

2.99102e-14 

(2.99067e-14, 3.00000e-14) 

0.300 

X 3 = 3e-2 
a= le-8 

d 4 (T) 

1.79282e-05 

(1.79276e-05, 1.80000e-05) 

0.400 

X, = le-6 

X 2 = le-5 

D 2 (T) 

9.99994e-12 

(6.62146e-12, 1.00000e-ll) 

33.785 

X 3 = le-8 
a= le-1 

D 4 (T) 

4.90096e-ll 

(4.22053e-ll, 5.00100e-ll) 

13.884 


+ RECOVERY TOO SLOW 


Again, large relative errors occurred when recovery times were relatively slow 
with respect to the mission time. 




PROBLEM 15 
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F(t) 


NOTE: 

V T > 

(T) 
P 2 (T) 

D 2 (T) 




1 - e _xit , t > 0; G(t) * 1 - e _X2t , t > 0; H(t) = 1 - e“ X3t , t > 0 


Death-State Probability 

To obtain an exact expression for D 2 (T), the following set of 
differential equations were solved. 


- -\P 0 (T) + X 3 P 1 (T) 

= \P 0 (T) - (Xj + X 3 )pj (T) 
= X 2 P x (T) 


[-(X 1 +X 2 +X 3 )[(X 1 +X 2 +X 3 ) 2 -4X x X 2 ] 1 / 2 + (X 1 +X 2 +X 3 ) 2 -4X x X 2 ] 


- 1 -k 


e [ ( X1 + X2 + X3 ) 2 -4XlX2 ] 1/2 T/2 _ 


t-(X 1 +X 2 +X 3 )t(X 1 +X 2 +X 3 ) 2 -4X 3 X 2 ] 1/2 - ( X x +X 2 +X 3 ) 2 +4X 3 X 2 l' 1 * 


e -[ (Xl+X2+X3) 2 -4XlX2) 1/2 T/2 


2X x X 2 e~ 1 
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TABLE 15 


exponential parameter for the (0,1) transition 
Xj : exponential parameter for the (1,2) transition 
X 3 : exponential parameter for the (1,0) transition 


PARAMETERS 

DEATH 

STATES 

ANALYTIC 

SOLUTIONS 

SURE BOUNDS 

% 

ERROR 

X 3 = 5e-4 
X 2 = 4e-4 
X 3 = 3e-4 

d 2 (t) 

9.96009e-06 

(9.96001e-06, 1.00000e-05) 

0.401 

\= le-3 
X 2 = le-5 
X 3 = le-7 

D 2 (T) 

4.98321e-07 

(4.98317e-07, 5.00000e-07) 

0.337 

X 3 = le-7 
X 2 = le-6 
X 3 = le-5 

d 2 (t) 

4.99982e-12 

(4.99981e-12, 5.00000e-12) 

0.004 

X 1 = 3e-4 
X 2 = 2e-4 
X 3 = le-1 

D 2 (T) 

2.20417e-06@ 

(2.20417e-06, 2.20417e-06) 

0.000 

X 1 = le-5 
X 2 = le-7 
X 3 = le-3 

d 2 (T) 

4.98321e-ll 

(4.98317e-ll, 5.00000e-ll) 

0.337 

X 3 = 8e-4 
X 2 = 4e-4 
X 3 = 3e-4 

d 2 (t) 

1.59202e-05 

(1.59200e-05, 1.60000e-05) 

0.501 

\ = le-1 
X 2 = le-2 
X 3 = le-3 

d 2 (t) 

3.54027e-02 

(3.54027e-02, 3.54027e-02) 

0.000 

X l = 2e-3 
X 2 = 3e-l 
X 3 = 2e-4 

d 2 (t) 

1.35515e-02@ 

(1.35515e-02, 1.35515e-02) 

0.000 

X 1 = 5e-2 
X 2 = 4e-2 
X 3 = le-7 

d 2 (t) 

7.45224e-02 

(7.45224e-02, 7.45224e-02) 

0.000 

X 3 = 3e-3 
X 2 = 2e-3 
X 3 = le-6 

d 2 (t) 

2.95046e-04 

(2.94999e-04, 3.00000e-04) 

1.679 


@ Analytic solution obtained using MARK 
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DISCUSSION OF RESULTS 

For all of the cases considered, the bounds given by the SURE program were 
true. That is, the exact unreliability for a given model was always enclosed 
in SURE's bounds. In a majority of the cases, the upper bound was much closer 
to the exact solution than the lower bound. The upper bound provided not only 
a good estimator of the death-state probability but a conservative estimate as 
well. For the mostpart, the bounds were also very tight. The relative error 
was less than 5% in 74% of the cases and even less than 1% in many of these 
cases. In cases where the relative error was less than or equal to 1%, the 
SURE bounds usually agreed to at least two decimal places. 

There were, however, certain parameter values which caused the bounds to 
separate even to the point, in a few cases, where the bounds would not provide 
a useful estimate of unreliability. The cases where the bounds tended to 
separate were characterized by a large relative error. The wide bounds can 
largely be attributed to slow non-exponential transitions, i.e. slow recovery 
rates. For non-exponential rates less than or equal to 5, the bounds were 
often widely separated. In some of these cases, the SURE program output a 
warning flag - "RECOVERY TOO SLOW". This warning flag, however, only appeared 
in cases where the relative error was 100%. It is recommended that this error 
flag also be issued in less extreme cases. 

Separation of the bounds also occurred in cases where a fast exponential rate 
was expressed as a slow transition. When a slow exponential rate was greater 
than or equal to 0.01, i.e., the fault arrival rate was fast, there tended to 
be a moderate separation of the bounds. Problems 4a and 4b demonstrated the 
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effect of describing a fast exponential transition as a slow transition. To 
yield accurate bounds, fast exponential transitions must be specified as 
general transitions. The warning flags - "RATE TOO FAST", "STANDARD DEVIATION 
TOO BIG", and "DELTA > TIME" - were output when fast transitions were not 
correctly specified. These flags were also only output when the relative error 
was 100%. Again, these flags should be issued in less extreme cases. 

As mentioned earlier, the user must decide based on the intended application 
whether the bounds given by SURE are tight enough to meet the requirements. 

One should keep in mind when using SURE that the mathematics implemented in the 
program were based on the concept of a fault- tolerant system with slow fault- 
arrival rates and very fast recovery rates. The fast fault-arrival rates and 
slow fault- recovery rates that induced the separated bounds are not considered 
typical of a fault-tolerant computer system. 

CONCLUSIONS 

Overall, the bounds given by the SURE program gave good estimates of the death- 
state probabilities for all models considered. Of particular importance, no 
cases were found in which the bounds did not enclose the exact unreliability, 
although there were a small number of cases in which the bounds were 
substantially separated. In most cases, the upper bound was a particularly 
good estimator of the death-state probability. For the simple models examined, 
the separation in the bounds could largely be attributed to fast fault-arrival 
rates and general transition rates which were relatively slow. Further work 

is underway in the validation effort. Testing is planned using larger models 
and comparing SURE's bounds to estimates given by other reliability analysis 
tools such as CARE III and HARP. 
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SYMBOLS 

The greek characters, X, a, (3, y, and e, represent exponential transition rates 
in all of the semi -Markov models. 

The capital letters, F, G, H, and I, represent general transition distributions 
in all of the semi -Markov models. 

D a (T) - probability of being in death-state i at time T” 

P a (T) - probability of being in a death state at time T at the end of a 

class i-type path transition 

9 

P i (T) - first derivative of P^T) 

T - mission time 

/j( ) - statistical mean of a distribution 

p( ) - transition probability for a distribution 

a 2 ( ) - statistical variance of a distribution 

@ - a solution was obtained from MARK 

+ - a RECOVERY TOO SLOW message was issued by the SURE program 

t - a RATE TOO FAST message was issued by the SURE program 

& - a STANDARD DEVIATION TOO BIG message was issued by the SURE program 

- a DELTA > TIME message was issued by the SURE program 


6 
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